Win32:Trojano-1165 [Trj]

bonjours. voila, mon pc était serieusement infecté, et j'ai déniché plusieurs foyers que j'ai détruit, mai pendant mon scan Avast, j'ai trouvé plusieurs fichiers que je n'ai pas suprimés, a cause de leur présence dans le dossier systeme de windows.

ils sont infectés par Win32:Trojano-1165 [Trj] et en voici la liste.

c:\windows\system32\kjryoely.dll
kwqpnffb.dll
kyrxhmaf.dll
gbabpprn.dll
oelshgda.dll
hcgffjrt.dll
aybbdcsc.dll
quijwvvw.dll
hgovivhk.dll
jnvghiem.dll
tojwmulq.dll
vkvvnvqp.dll
vvcdffli.dll
wvtsijvso.dll
xlyqoyyx.dll
xuowfbuf.dll
kbjvsfip.dll
ayxkoj.dll

voila. merci d'avence pour l'aide

12 réponses

  1. aussi une question qui n'a rien a voir, a propos de sunbelt kerio.
    c un freeware? car on me dis que je suis arrivé a la fin de ma demo?
    puisque je l'ai eu ici, je me dis que vous devez savoir...

    ---------------------------

    Logfile of HijackThis v1.99.1
    Scan saved at 23:50:38, on 11/12/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Giganology\Gigaget\GigagetShell.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    C:\WINDOWS\vsnpstd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Maxthon\Maxthon.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: GigagetIEHelper Class - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\System32\gigagetbho_v10.dll
    O2 - BHO: (no name) - {35F7813A-AF74-4474-B1DC-7EE6FB6C43C6} - C:\WINDOWS\System32\mwejflbs.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: (no name) - {C1942C19-1FA8-4907-9B00-7AAC6C39FBA1} - C:\WINDOWS\System32\ssqpp.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [eMuleAutoStart] C:\coincoin\eMule\emule.exe -AutoStart
    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
    O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
    O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4897C1FD-A695-4825-9468-089435E0BD2F}: NameServer = 195.238.2.22 195.238.2.21
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: ssqpp - C:\WINDOWS\System32\ssqpp.dll
    O20 - Winlogon Notify: wqjpxdex - c:\windows\system32\wqjpxdex.dll (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    0
    1. Salut

      Oui, Kerio reste gratuit ;-)

      telecharge
      http://www.atribune.org/ccount/click.php?id=4

      double clic dessus choisis "start for vundo"
      attends quelques minutes, quand le scan est terminé clic sur "remove vundo"
      un message te demandera si tu veux supprimes les fichiers sur "yes"
      Quand il a terminé, clic sur "yes" ton ordinateur devrait redemarrer sinon, fais le par toit même
      Une fois qu'il a redemarré colle le rapport C:\vundofix.txt et un nouveau rapport hijackthis stp
      0
      1. VundoFix V6.2.6

        Checking Java version...

        Java version is 1.5.0.6

        Java version is 1.5.0.7

        Scan started at 00:51:12 12/12/2006

        Listing files found while scanning....

        C:\WINDOWS\System32\ssqpp.dll
        C:\WINDOWS\System32\ppqss.ini
        C:\WINDOWS\System32\ppqss.bak2
        C:\WINDOWS\System32\ppqss.ini2

        Beginning removal...

        Attempting to delete C:\WINDOWS\System32\ssqpp.dll
        C:\WINDOWS\System32\ssqpp.dll Has been deleted!

        Attempting to delete C:\WINDOWS\System32\ppqss.ini
        C:\WINDOWS\System32\ppqss.ini Has been deleted!

        Attempting to delete C:\WINDOWS\System32\ppqss.bak2
        C:\WINDOWS\System32\ppqss.bak2 Has been deleted!

        Attempting to delete C:\WINDOWS\System32\ppqss.ini2
        C:\WINDOWS\System32\ppqss.ini2 Has been deleted!

        Performing Repairs to the registry.
        Done!

        Logfile of HijackThis v1.99.1
        Scan saved at 00:59:25, on 12/12/2006
        Platform: Windows XP SP1 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\System32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\WINDOWS\ATKKBService.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
        C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
        C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\Giganology\Gigaget\GigagetShell.exe
        C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
        C:\WINDOWS\vsnpstd2.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
        C:\Program Files\DAEMON Tools\daemon.exe
        C:\WINDOWS\System32\ctfmon.exe
        C:\Program Files\MSN Messenger\MsnMsgr.Exe
        C:\WINDOWS\system32\dumprep.exe
        C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
        C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
        C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: GigagetIEHelper Class - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\System32\gigagetbho_v10.dll
        O2 - BHO: (no name) - {35F7813A-AF74-4474-B1DC-7EE6FB6C43C6} - C:\WINDOWS\System32\mwejflbs.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O2 - BHO: (no name) - {88D4D1FA-6888-4009-BBB8-034C0ABBD169} - C:\WINDOWS\System32\ssqpp.dll (file missing)
        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [Gigaget] "C:\Program Files\Giganology\Gigaget\GigagetShell.exe" /s
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
        O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
        O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [eMuleAutoStart] C:\coincoin\eMule\emule.exe -AutoStart
        O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
        O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
        O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
        O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
        O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
        O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
        O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O20 - Winlogon Notify: wqjpxdex - c:\windows\system32\wqjpxdex.dll (file missing)
        O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
        O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
        O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
        O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
        O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
        O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
        0
        1. Ok, tu peux jeter VundoFix

          Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clique dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
          Une fois qu'il a terminé colle le rapport ici stp

          https://www.bitdefender.com/toolbox/
          0
          1. Could not load the Online Scanner!

            impossible, meme en coupant mon firewall.
            0
            1. Tu as quoi comme anti-spywares ?

              Puis fai ceci

              Télécharge ComboFix
              http://download.bleepingcomputer.com/sUBs/combofix.exe

              Ferme ton navigateur web avant d'exécuter ce programme
              Double-clique dessus et appuye sur "Y" pour continuer

              Attends quelques minutes..un rapport va s'ouvrir enregistre son contenu, puis copie et colle le ici stp
              0
              1. AVG Anti-Spyware

                metal.kanar - 06-12-12 12:56:21,37 Service Pack 1
                ComboFix 06.10.19 - Running from: "C:\Documents and Settings\metal.kanar\Bureau\anti v solution"

                (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

                C:\WINDOWS\system32\mc-110-12-0000144.exe
                C:\deskbar_e37.exe
                C:\Program Files\Inetget2
                C:\Program Files\Fichiers communs\{40E5EF09-070A-1036-0715-050503010021}

                ((((((((((((((((((((((((((((((( Files Created from 2006-11-12 to 2006-12-12 ))))))))))))))))))))))))))))))))))

                2006-12-12 00:45 106,555 --a------ C:\WINDOWS\system32\qvdakqno.dll
                2006-12-11 23:46 106,555 --a------ C:\WINDOWS\system32\wqsoypws.dll
                2006-12-11 15:16 106,555 --a------ C:\WINDOWS\system32\puqgwaky.dll
                2006-12-11 02:53 106,555 --a------ C:\WINDOWS\system32\vbcbjflg.dll
                2006-12-11 00:42 106,555 --a------ C:\WINDOWS\system32\wvtsjvso.dll
                2006-12-10 22:22 106,555 --a------ C:\WINDOWS\system32\kyrxhmaf.dll
                2006-12-10 18:37 106,555 --a------ C:\WINDOWS\system32\oybbdcsc.dll
                2006-12-10 15:24 106,555 --a------ C:\WINDOWS\system32\vucdffli.dll
                2006-12-09 22:46 106,555 --a------ C:\WINDOWS\system32\tojwmulq.dll
                2006-12-09 14:11 106,555 --a------ C:\WINDOWS\system32\hchffjrt.dll
                2006-12-09 02:13 106,555 --a------ C:\WINDOWS\system32\kbjvsfip.dll
                2006-12-09 01:56 106,555 --a------ C:\WINDOWS\system32\kwqpnffb.dll
                2006-12-08 22:58 106,555 --a------ C:\WINDOWS\system32\jnvghiem.dll
                2006-12-08 22:35 106,555 --a------ C:\WINDOWS\system32\kjryoely.dll
                2006-12-08 21:41 98,304 --a------ C:\WINDOWS\System32CmdLineExt.dll
                2006-12-08 18:21 106,555 --a------ C:\WINDOWS\system32\vkvvnvqp.dll
                2006-12-08 16:18 106,555 --a------ C:\WINDOWS\system32\awhlqvwt.dll
                2006-12-08 14:59 88,340 --a------ C:\WINDOWS\system32\vcyulsax.exe
                2006-12-08 14:57 106,555 --a------ C:\WINDOWS\system32\hgouivhk.dll
                2006-12-08 01:18 90,164 ---hs---- C:\WINDOWS\system32\mljji.dll
                2006-12-08 00:58 51,725 --a------ C:\WINDOWS\is67003.exe
                2006-12-08 00:56 106,555 --a------ C:\WINDOWS\system32\oelshgda.dll
                2006-12-07 23:58 42,516 --a------ C:\WINDOWS\system32\mwejflbs.dll
                2006-12-07 23:58 126,996 --a------ C:\WINDOWS\system32\cpqlawax.dll
                2006-12-07 19:22 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
                2006-12-07 19:10 90,164 ---hs---- C:\WINDOWS\system32\awtqo.dll
                2006-12-07 18:57 106,555 --a------ C:\WINDOWS\system32\gbabpprn.dll
                2006-12-07 16:49 106,555 --a------ C:\WINDOWS\system32\qujdwvvw.dll
                2006-12-07 11:38 90,164 ---hs---- C:\WINDOWS\system32\jkkli.dll
                2006-12-07 11:27 106,555 --a------ C:\WINDOWS\system32\xlyqoyyx.dll
                2006-12-07 01:42 106,555 --a------ C:\WINDOWS\system32\ayxkojlb.dll
                2006-12-06 22:09 106,555 --a------ C:\WINDOWS\system32\xuowfbuf.dll
                2006-12-06 20:22 588 --a------ C:\WINDOWS\system32\sstqp.dll
                2006-12-06 20:21 309,812 ---hs---- C:\WINDOWS\system32\jkhfe.dll
                2006-12-06 19:04 28,672 --a------ C:\WINDOWS\system32\xpda.exe
                2006-12-06 17:29 28,672 --a------ C:\WINDOWS\system32\jjlia.exe
                2006-12-06 13:22 28,672 --a------ C:\WINDOWS\system32\fuqofw.exe
                2006-12-06 09:24 28,672 --a------ C:\WINDOWS\system32\xklqgu.exe
                2006-12-06 04:55 28,672 --a------ C:\WINDOWS\system32\bauw.exe
                2006-12-05 22:17 28,672 --a------ C:\WINDOWS\system32\gdusdxzs.exe
                2006-12-05 20:26 28,672 --a------ C:\WINDOWS\system32\roamfij.exe
                2006-12-05 19:25 28,672 --a------ C:\WINDOWS\system32\pghkd.exe
                2006-12-05 15:17 28,672 --a------ C:\WINDOWS\system32\jacnkw.exe
                2006-12-05 14:52 28,672 --a------ C:\WINDOWS\system32\gcjcnqtq.exe
                2006-12-05 13:38 28,672 --a------ C:\WINDOWS\system32\iimeopz.exe
                2006-12-04 20:15 28,672 --a------ C:\WINDOWS\system32\xrmdlud.exe
                2006-12-04 18:43 28,672 --a------ C:\WINDOWS\system32\rrxls.exe
                2006-11-20 01:30 89,088 --a------ C:\WINDOWS\system32\atl71.dll
                2006-11-20 01:30 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
                2006-11-20 01:29 35 --a------ C:\WINDOWS\system32\RTELM.dll

                (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

                2006-12-12 12:58 -------- d-------- C:\Program Files\Fichiers communs
                2006-12-12 12:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Xfire
                2006-12-12 12:52 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\OpenOffice.org2
                2006-12-12 02:56 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Azureus
                2006-12-12 00:59 -------- d-------- C:\Program Files\Hijackthis Version Fran‡aise
                2006-12-11 17:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\U3
                2006-12-11 01:30 -------- d-------- C:\Program Files\DaemonTools_WhenUSave_Installer
                2006-12-09 01:20 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Adobe
                2006-12-08 23:01 -------- d-------- C:\Program Files\DAEMON Tools
                2006-12-08 22:31 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
                2006-12-08 20:14 -------- d-------- C:\Program Files\Adobe
                2006-12-08 20:11 -------- d--h----- C:\Program Files\InstallShield Installation Information
                2006-12-08 18:21 -------- d-------- C:\Program Files\VSToolbar
                2006-12-07 19:22 -------- d-------- C:\Program Files\Grisoft
                2006-12-07 01:27 -------- d-------- C:\Program Files\OpenOffice.org 2.0
                2006-12-05 14:50 -------- d---s---- C:\Program Files\Xfire
                2006-12-05 00:59 -------- d-------- C:\Program Files\rpg maker
                2006-11-22 20:29 101888 --a------ C:\WINDOWS\system32\services.exe
                2006-11-22 19:58 44032 --a------ C:\WINDOWS\system32\ftp.exe
                2006-11-22 19:58 17920 --a------ C:\WINDOWS\system32\tftp.exe
                2006-11-22 17:28 -------- d-------- C:\Program Files\Chaos Shredder2.3FR
                2006-11-21 20:49 -------- d-------- C:\Program Files\Yahoo!
                2006-11-21 20:49 -------- d-------- C:\Program Files\CCleaner
                2006-11-13 18:42 -------- d---s---- C:\Documents and Settings\metal.kanar\Application Data\Microsoft
                2006-11-11 02:32 15939 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
                2006-11-11 02:31 -------- d-------- C:\Program Files\Belkin
                2006-11-06 22:00 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
                2006-11-06 17:49 -------- d-------- C:\Program Files\FairUse Wizard
                2006-10-31 01:42 -------- d-------- C:\Program Files\QuickTime
                2006-10-31 01:42 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Apple Computer
                2006-10-31 01:41 -------- d-------- C:\Program Files\Apple Software Update
                2006-10-26 17:28 181580 --a------ C:\WINDOWS\YazzleBundle-1125.exe
                2006-10-26 17:28 1024 --ahs---- C:\WINDOWS\system32\is941.exe
                2006-10-25 22:47 -------- d-------- C:\Program Files\MSN Messenger
                2006-10-24 18:51 135168 --a------ C:\WINDOWS\system32\sfc_os.dll
                2006-10-24 18:50 13664 --ah----- C:\WINDOWS\system32\ksbar.exe
                2006-10-24 18:33 562980 --a------ C:\WINDOWS\system32\winsms.exe
                2006-10-24 18:20 -------- d-------- C:\Program Files\ATI Technologies
                2006-10-23 11:43 114392 --a------ C:\WINDOWS\system32\fhm.exe
                2006-10-22 11:53 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
                2006-10-22 11:42 -------- d-------- C:\Program Files\Fichiers communs\InstallShield
                2006-10-21 14:49 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\GRETECH
                2006-10-21 14:48 -------- d-------- C:\Program Files\GRETECH
                2006-10-21 14:47 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Media Player Classic
                2006-10-21 14:45 -------- d-------- C:\Program Files\K-Lite Codec Pack
                2006-10-21 01:51 73216 --a------ C:\WINDOWS\ST6UNST.EXE
                2006-10-21 01:51 249856 --------- C:\WINDOWS\Setup1.exe
                2006-10-21 01:47 -------- d-------- C:\Program Files\Winamp
                2006-10-21 01:47 -------- d-------- C:\Program Files\MUSK Codec Pack v5
                2006-10-20 17:14 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\vlc
                2006-10-15 17:42 301 --a------ C:\WINDOWS\Vue 5 Infinite.reg
                2006-10-15 17:30 974848 --a------ C:\WINDOWS\system32\mfc70.dll
                2006-10-15 17:30 487424 --a------ C:\WINDOWS\system32\msvcp70.dll
                2006-10-15 17:30 344064 --a------ C:\WINDOWS\system32\msvcr70.dll
                2006-10-15 17:28 -------- d-------- C:\Program Files\e-on software
                2006-10-15 16:59 -------- d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
                2006-10-15 16:59 -------- d-------- C:\Program Files\Fichiers communs\Adobe
                2006-10-15 16:53 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\mirage
                2006-10-15 16:18 -------- d-------- C:\Program Files\Windows Media Player
                2006-10-14 20:47 44 --a------ C:\WINDOWS\system32\msssc.dll
                2006-10-14 20:47 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Macromedia
                2006-10-14 20:40 -------- d-------- C:\Program Files\Java
                2006-10-14 20:15 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Ahead
                2006-10-14 19:56 -------- d-------- C:\Program Files\Azureus
                2006-10-14 19:43 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Google
                2006-10-14 19:42 -------- d-------- C:\Program Files\Google
                2006-10-14 19:40 -------- d-------- C:\Program Files\Giganology
                2006-10-14 19:37 -------- d-------- C:\Program Files\WinRAR
                2006-10-14 18:57 62 --ahs---- C:\Documents and Settings\metal.kanar\Application Data\desktop.ini
                2006-10-14 18:30 -------- d-------- C:\Program Files\Thomson
                2006-10-14 18:23 -------- d-------- C:\Documents and Settings\metal.kanar\Application Data\Identities
                2006-10-14 18:05 -------- d--h----- C:\Program Files\WindowsUpdate
                2006-10-14 18:04 -------- d-------- C:\Program Files\Messenger
                2006-10-14 17:39 -------- d-------- C:\Program Files\GameSpy Arcade
                2006-10-12 23:27 -------- d-------- C:\Program Files\ESET
                2006-10-12 22:43 -------- d-------- C:\Program Files\Sunbelt Software
                2006-10-12 22:06 -------- d-------- C:\Program Files\VirtualDJ
                2006-10-12 19:09 -------- d-------- C:\Program Files\Movie Maker
                2006-10-12 19:09 -------- d-------- C:\Program Files\Internet Explorer
                2006-10-12 19:08 -------- d-------- C:\Program Files\NetMeeting
                2006-10-12 19:07 -------- d-------- C:\Program Files\Outlook Express
                2006-10-12 19:07 -------- d-------- C:\Program Files\Fichiers communs\System
                2006-10-12 17:14 -------- d-------- C:\Program Files\support.com
                2006-09-25 16:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe
                2006-09-25 16:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
                2006-09-13 22:14 593938 --a------ C:\WINDOWS\system32\x264vfw.dll

                (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

                *Note* empty entries are not shown

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
                "CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
                "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
                "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Fichiers communs\\Ahead\\lib\\NMBgMonitor.exe\""
                "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
                "eMuleAutoStart"="C:\\coincoin\\eMule\\emule.exe -AutoStart"

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
                "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
                "SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
                "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
                "Gigaget"="\"C:\\Program Files\\Giganology\\Gigaget\\GigagetShell.exe\" /s"
                "NeroFilterCheck"="C:\\WINDOWS\\System32\\NeroCheck.exe"
                "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
                "Smapp"="C:\\Program Files\\Analog Devices\\SoundMAX\\SMTray.exe"
                "SNPSTD2"="C:\\WINDOWS\\vsnpstd2.exe"
                "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
                "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
                65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
                "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
                "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
                "DeskHtmlVersion"=dword:00000110
                "DeskHtmlMinorVersion"=dword:00000005
                "Settings"=dword:00000001
                "GeneralFlags"=dword:00000000

                [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
                "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

                [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
                "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
                "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
                "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
                "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
                "{3A947772-3B29-41DB-A436-4B5CAAECE2F6}"=""
                "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
                "NoDriveTypeAutoRun"=dword:00000091

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                "dontdisplaylastusername"=dword:00000000
                "legalnoticecaption"=""
                "legalnoticetext"=""
                "shutdownwithoutlogon"=dword:00000001
                "undockwithoutlogon"=dword:00000001

                [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
                "NoDriveTypeAutoRun"=dword:00000091

                [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer\Run]

                [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
                "NoDriveTypeAutoRun"=dword:00000091

                [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer\Run]

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
                "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
                "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
                "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
                "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

                HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wqjpxdex

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
                "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

                Contents of the 'Scheduled Tasks' folder
                C:\WINDOWS\tasks\AppleSoftwareUpdate.job
                C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job

                Completion time: 06-12-12 12:59:03.28
                C:\ComboFix.txt ... 06-12-12 12:59
                C:\ComboFix2.txt ... 06-10-26 00:33
                0
                1. Salut

                  Clique sur démarrer, rechercher, cherche et supprime ces fichiers si présents:

                  - x264vfw.dll
                  - ksbar.exe
                  - winsms.exe
                  - fhm.exe
                  - is941.exe

                  Clique sur poste de travail, C:, program files et supprime ce dossier:

                  - VSToolbar

                  **Si un fichier persiste lors de la suppression fait ceci:
                  -Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisit "mode sans echec" attends un peu.. puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement

                  Rends toi sur se site, en haut à droite clique sur "choose" tu vas dans C:, windows, system32 tu cherche le processus ci-dessous et tu cliques sur "ouvrir" dès que c'est fait tu cliques sur "send" tu attends un peu et colle le rapport ici une fois qu'il a terminé stp

                  http://www.virustotal.com/en/virustotalx.html

                  C:\WINDOWS\system32\msssc.dll < à analyser

                  Mets à jour AVG anti-spyware et fait un scan complet de ton système, pusi colle le rapport ici stp

                  Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
                  http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
                  0
                  1. aucune trace de
                    is941.exe
                    ksbar.exe

                    Antivirus Version Update Result
                    AntiVir 7.3.0.15 12.13.2006 no virus found
                    Authentium 4.93.8 12.13.2006 no virus found
                    Avast 4.7.892.0 12.13.2006 no virus found
                    AVG 386 12.13.2006 no virus found
                    BitDefender 7.2 12.13.2006 no virus found
                    CAT-QuickHeal 8.00 12.13.2006 no virus found
                    ClamAV devel-20060426 12.13.2006 no virus found
                    DrWeb 4.33 12.13.2006 no virus found
                    eSafe 7.0.14.0 12.13.2006 no virus found
                    eTrust-InoculateIT 23.73.84 12.13.2006 no virus found
                    eTrust-Vet 30.3.3248 12.13.2006 no virus found
                    Ewido 4.0 12.13.2006 no virus found
                    Fortinet 2.82.0.0 12.13.2006 no virus found
                    F-Prot 3.16f 12.13.2006 no virus found
                    F-Prot4 4.2.1.29 12.13.2006 no virus found
                    Ikarus T3.1.0.26 12.13.2006 no virus found
                    Kaspersky 4.0.2.24 12.13.2006 no virus found
                    McAfee 4918 12.13.2006 no virus found
                    Microsoft 1.1804 12.13.2006 no virus found
                    NOD32v2 1920 12.13.2006 no virus found
                    Norman 5.80.02 12.13.2006 no virus found
                    Panda 9.0.0.4 12.13.2006 no virus found
                    Prevx1 V2 12.13.2006 no virus found
                    Sophos 4.12.0 12.13.2006 no virus found
                    Sunbelt 2.2.907.0 11.30.2006 no virus found
                    TheHacker 6.0.3.131 12.10.2006 no virus found
                    UNA 1.83 12.13.2006 no virus found
                    VBA32 3.11.1 12.13.2006 no virus found
                    VirusBuster 4.3.15:9 12.13.2006 no virus found

                    Aditional Information
                    File size: 44 bytes
                    MD5: 249cb7009ab09bc0ca236869ba118a72
                    SHA1: 0e8779963ee8edb633dfabf717be29960bee4fde

                    ********************

                    ---------------------------------------------------------
                    AVG Anti-Spyware - Rapport d'analyse
                    ---------------------------------------------------------

                    + Créé à: 23:33:06 13/12/2006

                    + Résultat de l'analyse:

                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@fastclick[2].txt -> TrackingCookie.Fastclick : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@statcounter[1].txt -> TrackingCookie.Statcounter : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
                    C:\Documents and Settings\metal.kanar\Cookies\metal.kanar@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
                    C:\WINDOWS\YazzleBundle-1125.exe -> Trojan.PurityAd.c : Aucune action entreprise.

                    Fin du rapport
                    0
                    1. Fait ce nettoyage: (à faire réguliérement)

                      ¤Telecharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
                      ---> Ccleaner

                      dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
                      Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

                      ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

                      Si tu as besoin d'aide pour Ccleaner, regarde ce tutoriel:
                      http://www.tutopat.com/viewtopic.php?t=305

                      Refait un scan complet avec Ewido et "delete" tout ce qu'il te trouve
                      0